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AMENDMENTS TO THE CLAIMS 

1-24. (Canceled) 

25. (Previously Presented) A method of selectively creating chains for a virtual 
interface, the method comprising the computer-implemented steps of: 
determining whether a new encapsulation chain should be created, on a network 

element, for a particular virtual interface by determining whether at least one 
physical port of a particular card of the network element (a) is configured to 
send data packets of a type that would be produced by an encapsulation chain 
for the particular virtual interface and (b) can send data packets toward a 
destination associated with the particular virtual interface; 

determining whether a new decapsulation chain should be created, on the network 
element, for the particular virtual interface by determining whether at least 
one physical port of a particular card of the network element is configured to 
receive data packets of a type that would be processed by a decapsulation 
chain for the particular virtual interface; 

in response to determining that a new encapsulation chain should be created, on the 
network element, for the particular virtual interface, creating, on the network 
element, a new encapsulation chain for the particular virtual interface; and 

in response to determining that a new decapsulation chain should be created, on the 
network element, for the particular virtual interface, creating, on the network 
element, a new decapsulation chain for the particular virtual interface. 

26. (Previously Presented) A method as recited in Claim 25, further comprising: 
in response to determining that a new encapsulation chain should not be created, on 

the network element, for the particular virtual interface, avoiding creating, on 
the network element, a new encapsulation chain for the particular virtual 
interface. 

27. (Previously Presented) A method as recited in Claim 25, further comprising: 
in response to determining that a new decapsulation chain should not be created, on 

the network element, for the particular virtual interface, avoiding creating, on 
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the network element, a new decapsulation chain for the particular virtual 
interface. 

28. (Previously Presented) A method as recited in Claim 25, further comprising: 
in response to determining that a new encapsulation chain should not be created, on 

the network element, for the particular virtual interface, avoiding creating, on 
the network element, a new encapsulation chain for the particular virtual 
interface; and 

in response to determining that a new decapsulation chain should not be created, on 
the network element, for the particular virtual interface, avoiding creating, on 
the network element, a new decapsulation chain for the particular virtual 
interface. 

29. (Previously Presented) A method as recited in Claim 25, wherein the step of 
determining whether a new encapsulation chain should be created further comprises 
the steps of: 

in response to determining that no physical port of the particular card (a) is 

configured to send data packets of a type that would be produced by an 
encapsulation chain for the particular virtual interface and (b) can send data 
packets toward the destination associated with the particular virtual interface, 
then determining that a new encapsulation chain should not be created, on the 
network element, for the particular virtual interface. 

30. (Previously Presented) A method as recited in Claim 25, wherein the step of 
determining whether a new decapsulation chain should be created further comprises 
the steps of: 

in response to determining that no physical port of the particular card is configured to 
receive data packets of a type that would be processed by a decapsulation 
chain for the particular virtual interface, then determining that a new 
decapsulation chain should not be created, on the network element, for the 
particular virtual interface. 
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3 1 . (Previously Presented) A method as recited in Claim 25, wherein the steps of 
determining whether a new encapsulation chain should be created and determining 
whether a new decapsulation chain should be created comprise the steps of: 
determining whether a plurality of cards of the network element includes a 

specialized card that is designed to perform a type of data packet processing 
that would be performed by one or more chains for the particular virtual 
interface; and 

in response to determining that the plurality of cards includes a specialized card that 
is designed to perform a type of data packet processing that would be 
performed by one or more chains for the particular virtual interface, then 
determining that a new encapsulation chain should not be created, on the 
network element, for the particular virtual interface and determining that a 
new decapsulation chain should not be created, on the network element, for 
the particular virtual interface. 

32. (Previously Presented) A method as recited in Claim 25, wherein the step of 
determining whether a new encapsulation chain should be created further comprises 
the steps of: 

determining whether a plurality of cards of the network element includes a 

specialized card that is designed to perform a type of data packet processing 
that would be performed by one or more chains for the particular virtual 
interface; and 

in response to determining that at least one physical port of the particular card (a) is 
configured to send data packets of a type that would be produced by an 
encapsulation chain for the particular virtual interface and (b) can send data 
packets toward the destination associated with the particular virtual interface, 
and the plurality of cards does not include any specialized card that is 
designed to perform a type of data packet processing that would be performed 
by one or more chains for the particular virtual interface, then determining 
that a new encapsulation chain should be created, on the network element, for 
the particular virtual interface. 
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33. (Previously Presented) A method as recited in Claim 25, wherein the step of 
determining whether a new decapsulation chain should be created further comprises 
the steps of: 

determining whether a plurality of cards of the network element includes a 

specialized card that is designed to perform a type of data packet processing 
that would be performed by one or more chains for the particular virtual 
interface; and 

in response to determining that at least one physical port of the particular card is 
configured to receive data packets of a type that would be processed by a 
decapsulation chain for the particular virtual interface, and the plurality of 
cards does not include any specialized card that is designed to perform a type 
of data packet processing that would be performed by one or more chains for 
the particular virtual interface, then determining that a new decapsulation 
chain should be created, on the network element, for the particular virtual 
interface. 

34. (Previously Presented) A method as recited in Claim 25, wherein determining 
whether a new encapsulation chain should be created and determining whether a new 
decapsulation chain should be created are based on user input. 

35. (Previously Presented) A method of selectively creating chains on a plurality 
of cards of a network router, the method comprising the computer-implemented steps 
of: 

for each particular card within the plurality of cards, performing the steps of: 

for each particular virtual interface of the particular card, performing the steps 
of: 

determining whether at least one physical port of the particular card is 
configured to send data packets of a type that would be 
produced by an encapsulation chain for the particular virtual 
interface; 

determining whether at least one physical port of the particular card is 
(a) configured to receive data packets of a type that would be 
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processed by a decapsulation chain for the particular virtual 
interface and (b) can send data packets toward a destination 
associated with the particular virtual interface; 

determining whether the plurality of cards includes a specialized card 
that is designed to perform a type of data packet processing 
that would be performed by one or more chains for the 
particular virtual interface; 

in response to determining that the plurality of cards includes a 
specialized card that is designed to perform a type of data 
packet processing that would be performed by one or more 
chains for the particular virtual interface, then using no 
resources of the particular card to create an encapsulation chain 
and a decapsulation chain for the particular virtual interface; 

in response to determining that no physical port of the particular card 
is configured to send data packets of a type that would be 
produced by an encapsulation chain for the particular virtual 
interface, then using no resources of the particular card to 
create an encapsulation chain for the particular virtual 
interface; 

in response to determining that no physical port of the particular card 
is configured to receive data packets of a type that would be 
processed by a decapsulation chain for the particular virtual 
interface, then using no resources of the particular card to 
create a decapsulation chain for the particular virtual interface; 

in response to determining that at least one physical port of the 

particular card (a) is configured to send data packets of a type 
that would be produced by an encapsulation chain for the 
particular virtual interface and (b) can send data packets toward 
the destination associated with the particular virtual interface, 
and the plurality of cards does not include any specialized card 
that is designed to perform a type of data packet processing 
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that would be performed by one or more chains for the 
particular virtual interface, then using resources of the 
particular card to create an encapsulation chain for the 
particular virtual interface; and 
in response to determining that at least one physical port of the 

particular card is configured to receive data packets of a type 
that would be processed by a decapsulation chain for the 
particular virtual interface, and the plurality of cards does not 
include any specialized card that is designed to perform a type 
of data packet processing that would be performed by one or 
more chains for the particular virtual interface, then using 
resources of the particular card to create a decapsulation chain 
for the particular virtual interface. 

36. (Previously Presented) A volatile or non-volatile computer-readable medium 
carrying one or more sequences of instructions for selectively creating chains for a 
virtual interface, which instructions, when executed by one or more processors, cause 
the one or more processors to carry out: 

determining whether a new encapsulation chain should be created, on a network 

element, for a particular virtual interface by determining whether at least one 
physical port of a particular card of the network element (a) is configured to 
send data packets of a type that would be produced by an encapsulation chain 
for the particular virtual interface and (b) can send data packets toward a 
destination associated with the particular virtual interface; 

determining whether a new decapsulation chain should be created, on the network 
element, for the particular virtual interface by determining whether at least 
one physical port of a particular card of the network element is configured to 
receive data packets of a type that would be processed by a decapsulation 
chain for the particular virtual interface; 

in response to determining that a new encapsulation chain should be created, on the 
network element, for the particular virtual interface, creating, on the network 
element, a new encapsulation chain for the particular virtual interface; and 
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in response to determining that a new decapsulation chain should be created, on the 
network element, for the particular virtual interface, creating, on the network 
element, a new decapsulation chain for the particular virtual interface. 

37. (Previously Presented) A volatile or non- volatile computer-readable medium as 
recited in Claim 36, wherein the one or more sequences of instructions further 
comprise instructions which, when executed, cause the one or more processor to carry 
out avoiding creating, on the network element, a new encapsulation chain for the 
particular virtual interface, in response to determining that a new encapsulation chain 
should not be created, on the network element, for the particular virtual interface. 

38. (Previously Presented) A volatile or non-volatile computer-readable medium as 
recited in Claim 36, wherein the one or more sequences of instructions further 
comprise instructions which, when executed, cause the one or more processor to carry 
out avoiding creating, on the network element, a new decapsulation chain for the 
particular virtual interface, in response to determining that a new decapsulation chain 
should not be created, on the network element, for the particular virtual interface. 

39. (Previously Presented) A volatile or non-volatile computer-readable medium as 
recited in Claim 36, wherein the one or more sequences of instructions further 
comprise instructions which, when executed, cause the one or more processor to carry 
out: 

avoiding creating, on the network element, a new encapsulation chain for the 
particular virtual interface, in response to determining that a new 
encapsulation chain should not be created, on the network element, for the 
particular virtual interface; and 
avoiding creating, on the network element, a new decapsulation chain for the 
particular virtual interface, in response to determining that a new 
decapsulation chain should not be created, on the network element, for the 
particular virtual interface. 

40. (Previously Presented) A volatile or non-volatile computer-readable medium as 
recited in Claim 36, wherein the one or more sequences of instructions further 
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comprise instructions which, when executed, cause the one or more processor to carry 
out: 

in response to determining that no physical port of the particular card (a) is 

configured to send data packets of a type that would be produced by an 
encapsulation chain for the particular virtual interface and (b) can send data 
packets toward the destination associated with the particular virtual interface, 
then determining that a new encapsulation chain should not be created, on the 
network element, for the particular virtual interface. 

41. (Previously Presented) A volatile or non- volatile computer-readable medium as 
recited in Claim 36, wherein the one or more sequences of instructions further 
comprise instructions which, when executed, cause the one or more processor to carry 
out: 

in response to determining that no physical port of the particular card is configured to 
receive data packets of a type that would be processed by a decapsulation 
chain for the particular virtual interface, then determining that a new 
decapsulation chain should not be created, on the network element, for the 
particular virtual interface. 

42. (Previously Presented) A volatile or non- volatile computer-readable medium as 
recited in Claim 36, wherein the one or more sequences of instructions further 
comprise instructions which, when executed, cause the one or more processor to carry 
out: 

determining whether a plurality of cards of the network element includes a 

specialized card that is designed to perform a type of data packet processing 
that would be performed by one or more chains for the particular virtual 
interface; and 

in response to determining that the plurality of cards includes a specialized card that 
is designed to perform a type of data packet processing that would be 
performed by one or more chains for the particular virtual interface, then 
determining that a new encapsulation chain should not be created, on the 
network element, for the particular virtual interface and determining that a 
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new decapsulation chain should not be created, on the network element, for 
the particular virtual interface. 

43. (Previously Presented) A volatile or non- volatile computer-readable medium as 
recited in Claim 36, wherein the one or more sequences of instructions further 
comprise instructions which, when executed, cause the one or more processor to carry 
out: 

determining whether a plurality of cards of the network element includes a 

specialized card that is designed to perform a type of data packet processing 
that would be performed by one or more chains for the particular virtual 
interface; and 

in response to determining that at least one physical port of the particular card (a) is 
configured to send data packets of a type that would be produced by an 
encapsulation chain for the particular virtual interface and (b) can send data 
packets toward the destination associated with the particular virtual interface, 
and the plurality of cards does not include any specialized card that is 
designed to perform a type of data packet processing that would be performed 
by one or more chains for the particular virtual interface, then determining 
that a new encapsulation chain should be created, on the network element, for 
the particular virtual interface. 

44. (Previously Presented) A volatile or non- volatile computer-readable medium as 
recited in Claim 36, wherein the step of the one or more sequences of instructions 
further comprise instructions which, when executed, cause the one or more processor 
to carry out: 

determining whether a plurality of cards of the network element includes a 

specialized card that is designed to perforin a type of data packet processing 
that would be performed by one or more chains for the particular virtual 
interface; and 

in response to determining that at least one physical port of the particular card is 
configured to receive data packets of a type that would be processed by a 
decapsulation chain for the particular virtual interface, and the plurality of 
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cards does not include any specialized card that is designed to perform a type 
of data packet processing that would be performed by one or more chains for 
the particular virtual interface, then determining that a new decapsulation 
chain should be created, on the network element, for the particular virtual 
interface. 

45. (Previously Presented) A volatile or non- volatile computer-readable medium as 
recited in Claim 36, wherein determining whether a new encapsulation chain should 
be created and determining whether a new decapsulation chain should be created are 
based on user input. 

46. (Canceled) 

47. (Previously Presented) An apparatus for selectively creating chains for a virtual 
interface, comprising: 

a network interface that is coupled to a data network for receiving one or more packet 

flows therefrom; 
a processor; 

one or more stored sequences of instructions which, when executed by the processor, 
cause the processor to carry out: 

determining whether a new encapsulation chain should be created, on a network 

element, for a particular virtual interface by determining whether at least one 
physical port of a particular card of the network element (a) is configured to 
send data packets of a type that would be produced by an encapsulation chain 
for the particular virtual interface and (b) can send data packets toward a 
destination associated with the particular virtual interface; 

determining whether a new decapsulation chain should be created, on the network 
element, for the particular virtual interface by determining whether at least 
one physical port of a particular card of the network element is configured to 
receive data packets of a type that would be processed by a decapsulation 
chain for the particular virtual interface; 
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in response to determining that a new encapsulation chain should be created, on the 
network element, for the particular virtual interface, creating, on the network 
element, a new encapsulation chain for the particular virtual interface; and 

in response to determining that a new decapsulation chain should be created, on the 
network element, for the particular virtual interface, creating, on the network 
element, a new decapsulation chain for the particular virtual interface. 

48. (Previously Presented) An apparatus as recited in Claim 47, wherein the one or 
more sequences of instructions further comprise instructions which, when executed, 
cause the one or more processor to carry out avoiding creating, on the network 
element, a new encapsulation chain for the particular virtual interface, in response to 
determining that a new encapsulation chain should not be created, on the network 
element, for the particular virtual interface. 

49. (Previously Presented) An apparatus as recited in Claim 47, wherein the one or 
more sequences of instructions further comprise instructions which, when executed, 
cause the one or more processor to carry out avoiding creating, on the network 
element, a new decapsulation chain for the particular virtual interface, in response to 
determining that a new decapsulation chain should not be created, on the network 
element, for the particular virtual interface. 

50. (Previously Presented) An apparatus as recited in Claim 47, wherein the one or 
more sequences of instructions further comprise instructions which, when executed, 
cause the one or more processor to carry out: 

avoiding creating, on the network element, a new encapsulation chain for the 
particular virtual interface, in response to determining that a new 
encapsulation chain should not be created, on the network element, for the 
particular virtual interface; and 
avoiding creating, on the network element, a new decapsulation chain for the 
particular virtual interface, in response to determining that a new 
decapsulation chain should not be created, on the network element, for the 
particular virtual interface. 
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5 1 . (Previously Presented) An apparatus as recited in Claim 47, wherein the one or 
more sequences of instructions further comprise instructions which, when executed, 
cause the one or more processor to carry out: 

in response to determining that no physical port of the particular card (a) is 

configured to send data packets of a type that would be produced by an 
encapsulation chain for the particular virtual interface and (b) can send data 
packets toward the destination associated with the particular virtual interface, 
then determining that a new encapsulation chain should not be created, on the 
network element, for the particular virtual interface. 

52. (Previously Presented) An apparatus as recited in Claim 47, wherein the one or 
more sequences of instructions further comprise instructions which, when executed, 
cause the one or more processor to carry out: 

in response to determining that no physical port of the particular card is configured to 
receive data packets of a type that would be processed by a decapsulation 
chain for the particular virtual interface, then determining that a new 
decapsulation chain should not be created, on the network element, for the 
particular virtual interface. 

53. (Previously Presented) An apparatus as recited in Claim 47, wherein the one or 
more sequences of instructions further comprise instructions which, when executed, 
cause the one or more processor to carry out: 

determining whether a plurality of cards of the network element includes a 

specialized card that is designed to perform a type of data packet processing 
that would be performed by one or more chains for the particular virtual 
interface; and 

in response to determining that the plurality of cards includes a specialized card that 
is designed to perform a type of data packet processing that would be 
performed by one or more chains for the particular virtual interface, then 
determining that a new encapsulation chain should not be created, on the 
network element, for the particular virtual interface and determining that a 
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new decapsulation chain should not be created, on the network element, for 
the particular virtual interface. 

54. (Previously Presented) An apparatus as recited in Claim 47, wherein the one or 
more sequences of instructions further comprise instructions which, when executed, 
cause the one or more processor to carry out: 

determining whether a plurality of cards of the network element includes a 

specialized card that is designed to perform a type of data packet processing 
that would be performed by one or more chains for the particular virtual 
interface; and 

in response to determining that at least one physical port of the particular card (a) is 
configured to send data packets of a type that would be produced by an 
encapsulation chain for the particular virtual interface and (b) can send data 
packets toward the destination associated with the particular virtual interface, 
and the plurality of cards does not include any specialized card that is 
designed to perform a type of data packet processing that would be performed 
by one or more chains for the particular virtual interface, then determining 
that a new encapsulation chain should be created, on the network element, for 
the particular virtual interface. 

55. (Previously Presented) An apparatus as recited in Claim 47, wherein the one or 
more sequences of instructions further comprise instructions which, when executed, 
cause the one or more processor to carry out: 

determining whether a plurality of cards of the network element includes a 

specialized card that is designed to perform a type of data packet processing 
that would be performed by one or more chains for the particular virtual 
interface; and 

in response to determining that at least one physical port of the particular card is 
configured to receive data packets of a type that would be processed by a 
decapsulation chain for the particular virtual interface, and the plurality of 
cards does not include any specialized card that is designed to perform a type 
of data packet processing that would be performed by one or more chains for 
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the particular virtual interface, then determining that a new decapsulation 
chain should be created, on the network element, for the particular virtual 
interface. 

(Previously Presented) An apparatus as recited in Claim 47, wherein 

determining whether a new encapsulation chain should be created and determining 
whether a new decapsulation chain should be created are based on user input. 

(Previously Presented) A method of selectively creating chains on a plurality of 

cards of a network router, the method comprising the computer-implemented steps of: 
for each particular card within the plurality of cards, performing the steps of: 

for each particular virtual interface of the particular card, performing the steps of: 
determining whether at least one physical port of the particular card is 

configured to send data packets of a type that would be produced 
by an encapsulation chain for the particular virtual interface; 
determining whether at least one physical port of the particular card is (a) 
configured to receive data packets of a type that would be 
processed by a decapsulation chain for the particular virtual 
interface and (b) can send data packets toward a destination 
associated with the particular virtual interface; 
determining whether the plurality of cards includes a specialized card that 
is designed to perform a type of data packet processing that would 
be performed by one or more chains for the particular virtual 
interface; 

in response to determining that the plurality of cards includes a specialized 
card that is designed to perform a type of data packet processing 
that would be performed by one or more chains for the particular 
virtual interface, then using no resources of the particular card to 
create an encapsulation chain and a decapsulation chain for the 
particular virtual interface; 

in response to determining that no physical port of the particular card is 
configured to send data packets of a type that would be produced 
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by an encapsulation chain for the particular virtual interface, then 
using no resources of the particular card to create an encapsulation 
chain for the particular virtual interface; 

in response to determining that no physical port of the particular card is 
configured to receive data packets of a type that would be 
processed by a decapsulation chain for the particular virtual 
interface, then using no resources of the particular card to create a 
decapsulation chain for the particular virtual interface; 

in response to determining that at least one physical port of the particular 
card (a) is configured to send data packets of a type that would be 
produced by an encapsulation chain for the particular virtual 
interface and (b) can send data packets toward the destination 
associated with the particular virtual interface, and the plurality of 
cards does not include any specialized card that is designed to 
perform a type of data packet processing that would be performed 
by one or more chains for the particular virtual interface, then 
using resources of the particular card to create an encapsulation 
chain for the particular virtual interface; and 

in response to determining that at least one physical port of the particular 
card is configured to receive data packets of a type that would be 
processed by a decapsulation chain for the particular virtual 
interface, and the plurality of cards does not include any 
specialized card that is designed to perform a type of data packet 
processing that would be performed by one or more chains for the 
particular virtual interface, then using resources of the particular 
card to create a decapsulation chain for the particular virtual 
interface. 
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